CyberSec.Space Logo
Back to CVE Browser

CVE-2010-1349

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0030%
EPSS Percentile17.68th
PublishedApr 12, 2010
Last ModifiedApr 29, 2026

Vulnerability Description

Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow.

Affected Platforms (CPE)

📦
Opera

Opera Browser

= 10.10
📦
Opera

Opera Browser

= 10.50
📦
Opera

Opera Browser

= 10.50
📦
Opera

Opera Browser

= 10.50

References & Advisories

🔗 http://my.opera.com/securitygroup/blog/2010/03/09/the-malformed-content-length-header-security-issue
🔗 http://osvdb.org/62714
🔗 http://secunia.com/advisories/38820
🔗 http://www.exploit-db.com/exploits/11622
🔗 http://www.opera.com/support/kb/view/948/
🔗 http://www.securityfocus.com/bid/38519
🔗 http://www.securitytracker.com/id?1023690
🔗 http://www.vupen.com/english/advisories/2010/0529

Related Vulnerabilities

CVE-2007-20226.8

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to o...

CVE-2009-20706.8

Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in...

CVE-2018-125876.1

A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). In...

CVE-2003-10175.0

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such...